NETID

The easiest way to access your FDU email account on your mobile device is to install the Outlook app from either the App Store (Apple) or the Play Store (Android). We support and advise using this method due to the program’s robustness and integration of all Office365 features. Follow the steps below to install and set up the Outlook app on your phone.

1. Use the links below to install the Outlook app onto your mobile device.

2. Launch the app and press on “Add Account” if on an Android device. It will then prompt you to input your FDU email address. On iOS, the app will launch and immediately ask you for your FDU email address. Once filled out press “Continue” on Android. On iOS press “Add Account”

3. You will be routed to the FDU Single Sign On Page, from here input your FDU email address and password and press “Sign In”

4. For security purposes, all applications which use FDU’s Single Sign On (NetID) require Duo two-factor authentication. After inputting your FDU NetID login information, Duo requires you to complete a method of second-factor authentication

5. Your FDU email account has now been added to your device successfully. Ensure the email account is listed on your Outlook application.

Revision Date: New Policy
Effective Date: 11/1/2023

Section A – University Systems and Applications

I. Purpose

The purpose of this policy is to establish information security standards for individuals receiving credentials to Fairleigh Dickinson University (“FDU” or “University”) resources and how those resources are accessed.

II. Scope and Applicability

This policy applies to all university system resources. All Users are responsible for adhering to this policy.

III. Definitions

Capitalized terms shall have the meaning ascribed to them herein and shall have the same meaning when used in the singular or plural form or any appropriate tense.

1. Account: An established relationship between a User and a computer, network, or Information System which is assigned a credential such as a username and password.
   
2. System Administrative Account: An Account with elevated privileges intended to be used only when performing management tasks, such as installing updates and application software, managing user accounts, and modifying operating system and application settings.
   
3. Entitled Account: A user who has met the minimum requirement to be granted authorization to access electronic Fairleigh Dickinson University Resources.
   
4. Authorized User: A User who has been granted authorization to access electronic Fairleigh Dickinson University Resources and is current and active in their privileges.
   
5. Contractor or Vendor: A person or a company that undertakes a contract to provide materials or labor to perform a service.
   
6. Employee: University staff faculty and adjunct, including nonexempt, exempt, and overseas staff and collegiate faculty.
   
7. Multi-Factor Authentication (MFA): Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric).
   
8. Privileged Account: An Account that is authorized to perform security-relevant functions that an ordinary Account is not authorized to perform.
   
9. Single Sign-On (SSO): An authentication process that allows an Authorized User to access multiple applications with one set of login credentials. SSO is a common procedure in enterprises, where a client accesses multiple resources connected to a local area network (LAN).
   
10. User: A member of the University community, including but not limited to Staff and Faculty, and other individuals performing services on behalf of University, including Contractors, volunteers and other individuals who may have a need to access, use or control University Data.

IV. Authentication

1. Any service, application or Information System, whether on-premise or in the cloud, that contains WISP protected information, especially PI or PHI; OR is accessed by a large group of employees (20 or more), must use Single Sign-on authentication.
   
   • If the service or application is being provisioned by a business unit, the unit must engage University Systems to work with the provider to enable SSO.
     
   • If SSO is not supported by the service or application, it will not be approved for use by the university.
     
   • See Section V for exceptions.
     
2. Multi-factor authentication (MFA) must be used to access University resources.
   
3. Passwords must be constructed in accordance with the minimum requirements as listed below:
   
   • Authorized User Account passwords must meet a minimum length of 8 characters.
     
   • Administrative and Privileged Account passwords must meet a minimum of 10 characters.
     
   • Passwords must contain a mix of alphanumeric characters. Passwords must not consist of all digits, all special characters, or all alphabetic characters.
     
   • Automated controls must ensure that passwords are changed at 90-day intervals for both general users and administrative-level accounts.
     
   • NetIDs associated with a password must be disabled for a period of time after 10 consecutive failed login attempts. A minimum of 30 minutes is required for the reset period.
     
   • Passwords must not be the same as the NetID.
     
   • Passwords must not be displayed on screens.
     
   • Users must not share passwords.
     
   • Initial passwords and password resets must be issued pre-expired forcing the user to change the password upon first use.
     
   • Password reuse must be limited by not allowing the last 10 passwords to be reused. In addition, the password must be at least 2 days old in order to be voluntarily changed.
     
   • Access will be disabled 90 days past the date that a password expired if not changed.
     
   • Access will be disabled after 30 days of creation if NetID is not claimed.
     
   • Expired passwords must be changed before any other system activity is allowed.
     
4. Server Password Protocol
   
   • If, at any time, a member of the Community is granted permission to install a server, and access to that server is restricted via Login, and if that process is granted SSO exception through section VII., that system can not hold passwords in clear text. That system must use an approved irreversible cryptographic transform to protect its users’ passwords.

VI. Enforcement

• This policy will be enforced by technical controls wherever feasible; otherwise, this policy will be enforced by OIRT under the direction of the CIO. All members of FDU’s faculty and staff have a responsibility to promptly report any known instances of noncompliance to AVP of University Systems and Networking or the Director of Systems.
  
• Failure to comply with this policy can result in disciplinary action. Any such discipline shall be in accordance with processes and procedures of Human Resources and subject to any protections afforded under the University’s agreement with “Office & Professional Employees International Union”, the “Faculty Handbook”, and similar documents. Third parties who violate this Policy may have their relationship with the University terminated and their access to campus restricted.

VII. Exceptions

• Exceptions to this policy should be submitted to the AVP, USAN for review. Approval of the Chief Information Officer (CIO) or Data Security Incident Response Team (DSIRT) may be required.

---

This article offers a detailed, step-by-step guide, on how to change your NETID password directly from your Mac using the Jamf Connect and how to synchronize this updated NETID password with your Mac’s user account password.

Changing and Syncing your NET ID Password on your Mac

1. Click on the “FDU shield icon” located in the top right of your screen’s menu bar

2. Select “Change Password at FDU Identity“

3. Sign in to the “FDU Identity Portal” that opens up

4. Scroll to “Change My Password” section and enter your old password and new password in the appropriate fields. Then click the “Change My Password” button

5. You will see the password successfully changed in the red bar when successful. Click “Done“

6. Enter your “FDU NetID” and “Password” in the corresponding fields. Click “Sign In”

7. Enter your old password in the “Local Password” prompt and click “Sync” to synchronize the new password with your Mac’s login password

Synchronizing NETID Password with your Mac Password

If you changed your NETID password outside of your FDU Mac, you will be prompted automatically to sync your password to your Mac’s password the next time you are connected to the internet. You will first need to log in to the machine using your old password and then proceed with the synchronization following the steps below.

3. The following dialog box will appear once you are connected to the internet automatically. Enter your “FDU NetID” and “Password” and click “Sign In”

4. Enter your old password in the “Local Password” prompt and click the “Sync” button to synchronize the new password with your Mac’s login password

Welcome to Fairleigh Dickinson University. As a new member of our campus community, one of your first priorities will be gaining access to FDU NetID. With an FDU NetID, you will have access to a variety of IT resources, including Office365. Depending on your role within the University, you will either be creating an account or claiming an account that has already been created for you. Please follow the process below which applies to you.

New Student through Welcome Email (US Students)

If you are a new student of our New Jersey campuses and you have received a Welcome email from fdu-it@fdu.edu, please visit the link below

New Student

If you are a new student at FDU Vancouver or if you are a New Jersey based student that has not received a Welcome Email, please visit the link below

New Faculty, Staff Member Temporary Employee, or On-Campus Contractor

If you are a new Faculty, adjunct Faculty, Staff member, temporary employee, or contractor who works on campus and requires a NetID, please visit the link below

All Others

If you are entitled to an FDU NetID account and either do not fall under any of the categories above or attempted to claim their NetID and received a message that your NetID has not been created, please visit the link below

Welcome to our comprehensive guide on utilizing the FDU Jamf Connect for login and NETID credential synchronization on macOS. This article is tailored for the staff, faculty, and students at FDU, providing a detailed walkthrough of the Jamf Connect login interface.

Login Screen

The Jamf Connect login screen consists of three sections: The login fields, the function buttons, and language and Wi-Fi.

The login fields are used to enter the NetID and password while the login button initiates the login. The username can be entered in any form that is recognized by Okta.

• Shut down: Powers the machine off
• Restart: Reboot the machine
• Help: Opens a mini browser to the FDU IT site

• Language Selection: Changes language
• Wi-Fi: Allows selection of wireless network

1. Enter your “FDU NetID” and “Password” and click the “Login” button

• You will see the message “Creating your account on this Mac” while the account is being created on the Mac

• If you are using a non-standard account name that does not match your FDU NetID, you will be able to select this account at login and link it to your NetID

2. Locate the account and click “Connect” to link it to your NetID. If you do not wish to link the existing, account click “Create Account” to proceed with a new account

3. You will be prompted to enter the “existing password” for the local account. Click “Connect” to complete the link.

The Jamf Connect app is used to synchronize domain credentials with the local machine credentials.

1. Enter your “FDU NETID” and “Password” and click the “Sign In” button

2. If your NETID password is out-of-sync, you will be prompted to sync them by entering the Local Password you use to sign into the machine. Click “Sync” to sync the new NETID password

There are a few different ways to change your University NetID password. However, Computing Services strongly urges everyone to change their FDU NetID password using a provided Apple or Windows university computer.

The process for changing your FDU NetID password on a macOS device differs from a Windows device, so please follow the instructions provide for macOS computers below.

If you do not have a university-owned Apple or Windows laptop/desktop and cannot use a University lab computer, please follow the procedures described in “Using identity.fdu.edu Web Portal to Change your FDU NetID Password” below.

Please click on one of the links below for instructions on how to change your FDU NetID password:

1. On FDU issued laptops, desktops, and lab machines, the FDU NetID password can be changed by pressing the “Ctrl+Alt+Del” button combination on the keyboard from any screen and selecting “Change a Password”

2. Now enter the following:
   
   • Your old or current password
   • Type in a new password
   • Retype the new password to confirm
   • Press the “Right Arrow” button to continue

3. Once this has been done, you must lock and unlock the machine once to complete updating your password:
   
   • Press the “Ctrl+Alt+Del” keys combination again
   • Click “Lock”
   • Then log back in with your new password

Your FDU NetID password was changed successfully!

1. Locate and then select the SSO extension “key” icon on the macOS menu bar

2. Select “Change Password…“

3. Enter your current FDU NetID password into the “Old Password” field

4. Choose and then enter a new FDU NetID password into the “New Password” field

5. Enter your new FDU NetID password again into the “Verify Password” field

6. Select “Change Password“

7. When your password change is successful, you will be prompted, “Password change successful.” Click “OK” to confirm

1. Launch the Cisco AnyConnect Secure Mobility Client VPN or “FDU VPN” software and connect to FDU’s VPN Service. If you need to install the “FDU VPN” or need instructions on how to launch the VPN Client, please follow the link below before proceeding:

2. Locate and then select the SSO extension “Key” icon on the macOS menu bar

3. Select “Change Password…“

4. Enter your current FDU NetID password into the “Old Password” field

5. Choose and then enter a new FDU NetID password into the “New Password” field

6. Enter your new FDU NetID password again into the “Verify Password” field

7. Select “Change Password“

8. When your password change is successful, you will be prompted, “Password change successful.” Click “OK” to confirm

Adjunct professors, students, and anyone with a personal laptop/desktop/tablet device will use the FDU Identity Web Portal to change their NetID password.

1. Open a web browser (e.g., Google Chrome, Mozilla Firefox, Internet Explorer, Safari) and navigate to the following URL:

2. Click on “Account Maintenance” on the top right hand of the web page

3. You will be redirected to the FDU Single-Sign-On login page. Enter your FDU NetID email and password in the corresponding text boxes and click “Sign In.” Complete the FDU 2fa Duo push notification to proceed

4. Under Sign-In and Security, select “Change My Password”
   
   • Enter your current password
   • Enter a new password
   • Retype your new password to confirm
   • When finished, select “Change My Password”

5. “Password successfully changed” will be displayed if your FDU NetID password was successfully changed

You also have the option to change the name that gets displayed on your NetID account.

1. Open a web browser (e.g., Google Chrome, Mozilla Firefox, Internet Explorer, Safari) and navigate to the following URL:

2. Click on “Account Maintenance” on the top right hand of the web page

3. You will be redirected to the FDU Single-Sign-On login page. Enter your FDU NetID email and password in the corresponding text boxes and click “Sign In.” Complete the FDU 2fa Duo push notification to proceed

4. Under Sign-In and Security, select “Change Display Name”
   • Enter your New Display Name
   • Click on “Change Display Name“

5. “Display Name successfully changed” will be displayed if your Display Name was successfully changed

Legacy Authentication is a term Microsoft sometimes uses to describe basic authentication when used with its cloud-based services. This is in contrast with the term “modern authentication” which provides more security and capabilities.

Legacy Authentication Topics

Legacy (or basic) authentication is characterized by:

• A client or network protocol that is incapable or not configured to do modern authentication
  
• A client which sends both the username and password to the application
  
• An application using the username and password to get a logon token on behalf of the user

Modern authentication is characterized by:

• a client and service capable and configured to use OpenID Connect, SAML, and/or OAuth 2.0 for authentication AND
  
• a client and service which can accept redirects to the identity provider for all authentication interactions and can work with authentication tokens of the protocols above

All Microsoft cloud services are modern authentication capable.

Whether legacy or modern authentication is used is dependent on the client capabilities. To use modern authentication, you can, in many cases, update your client application or change to an alternative client application.

A list of known clients using legacy authentication is available. Transitioning from legacy authentication usually requires the individual user to change the client software they are using, which may require assistance from the Fairleigh Dickinson University Technical Assistance Center (UTAC).

Protection with two-factor authentication (2FA)

Legacy authentication can not be protected by 2FA. Because the password is known to the application accessed via legacy authentication, it is less secure than modern authentication. If legacy authentication is not blocked for your account, 3rd party applications can ask for your credentials and have your password without you being aware they do.

Transition from legacy authentication

For the typical user, the complexity of determining whether you are using legacy authentication is significant. If you are using one of the client applications that does not use modern authentication protocols (see section below for a list of known clients using legacy authentication), you should replace them. If you don’t have one of these client applications but still suspect you have legacy authentication, contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for assistance.

In most cases, users will need to do one or more of the following:

• Update their application to a version that supports modern authentication protocols
  
• Upgrade to the latest version of their phone operating system
  
• Remove and re-add their FDU account in the configuration of their iOS or macOS application so it will use modern authentication protocols

All three of these actions are informed by the list of known insecure client apps. FDU IT doesn’t know your devices like you do, nor do we manage which client applications you use, so only you can identify where action needs to be taken.

If you don’t seem to have one of the insecure client applications but still suspect you have legacy authentication, For the typical user, the complexity of determining whether you are using legacy authentication is significant. If you are using one of the client applications that does not use modern authentication protocols (see section below for a list of known clients using legacy authentication), you should replace them. If you don’t have one of these client applications but still suspect you have legacy authentication, contact the Fairleigh Dickinson University Technical Assistance Center (UTAC) for assistance.

1. Open “Settings“
   
2. Choose “Calendar” or “Mail“
   
3. Choose “Accounts“
   
4. Choose “Exchange” or “Google” – make sure you are choosing an account in the format fdunetid@fdu.edu

5. Choose “Delete account“

6. Confirm the deletion by choosing “Delete from my iPhone“

1. Open the “Gmail App“

2. Tap the Account icon in the top right to view all existing accounts

3. Tap “Manage Accounts on this device“

4. Select your @fdu.edu mail account from the list

5. Tap “Remove account“

To add your FDU Email account to an iOS device’s native “Mail” app follow the instructions on the link below:

This list is not intended to be comprehensive; it is only a list of known client applications. If you have one which should be added, please let us know.

Client App	FDU IT Recommendation	Notes
Outlook 2010 or earlier	Replace with one of the supported email clients
Outlook 2013 without special settings enabled	Replace with one of the supported email clients	Alternate resolution (not supported by FDU-IT): Enable Modern authentication for Office 2013 on Windows devices – Microsoft 365 admin | Microsoft Docs
Mail or Calendar on iOS11 or newer	Replace with one of the supported email clients	Alternate resolution (not supported by FDU-IT): Remove FDU account on device, then re-add FDU account. These apps now support modern authentication, but that support was only recently added and any account setup previously is “stuck” in legacy authentication. You’ll need to delete the account and set it back up fresh to get modern authentication. Apple plans to release an update which automatically fixes this.
Mail or Calendar on iOS 10 or lower	Replace with one of the supported email clients	Alternate resolution: upgrade to iOS 11 or newer, then follow resolutions for that scenario
Any client application on iPhone 5 and lower	Use OWA or replace this device
Any client application on iPad 4th generation and lower	Use OWA or replace this device
Eudora	Replace with one of the supported email clients
Pine	Replace with one of the supported email clients
Thunderbird	Replace with one of the supported email clients
Mac Mail on Mac OS 10.13 or earlier	Replace with one of the supported email clients	Alternate resolution (not supported by FDU-IT): Upgrade macOS, remove FDU account on device, then re-add FDU account
Any client application on Chromebooks	Use OWA or replace this device
Sharepoint Designer 2013	Retire the use of this discontinued tool.	Contact FDU IT for more information

You may see an email in your FDU inbox like this:

While the email message says it was sent by your IT department, it was not. This email message wasn’t actually sent–it only exists on your mobile device and was created to alert you to the fact that your client application can’t sign into your account. Your email access has not been blocked–it is only that this client application is broken. You can verify for yourself that your email access was not blocked by going to Outlook on the Web. And the reason the client application is broken is because it can only do legacy authentication OR it only has cached credentials which are based on legacy authentication.

There are several ways to determine if you’re using Basic authentication or Modern authentication. If you’re using Basic authentication, you can determine where it’s coming from and what to do about it.

Authentication dialog

A simple way to tell if a client app (for example, Outlook) is using Basic authentication or Modern authentication is to observe the dialog that’s presented when the user logs in.

Modern authentication displays a web-based login page:

Basic authentication presents a dialog credential modal box:

On a mobile device, you’ll see a similar web-based page when you authenticate if the device is trying to connect using Modern authentication.

You can also check the connection status dialog box, by “CTRL + right-clicking” the Outlook icon in the system tray, and choosing Connection Status.

When using Basic authentication, the “Authn” column in the “Outlook Connection Status” dialog shows the value of “Clear“.

Once you switch to Modern authentication, the “Authn” column in the Outlook Connection Status dialog shows the value of “Bearer“.

SAMI Support requires a valid NetID and password, as well as DUO multi-factor authentication in order to access. Once the portal is accessed, you have the ability to generate a new ticket, review existing or closed tickets & view the IT Knowledgebase for information that can assist you with resolving problems. The SAMI Support Portal can be accessed by using the button below:

SAMI Support Portal

If you need to open a request and cannot access SAMI Support for any of the reasons below, please complete this request form or contact the Fairleigh Dickinson University Technical Assistance Center (UTAC). A member of the IT support team will assist you via phone call or email.

• I do not have a valid University issued NetID
• I am not able to authenticate through DUO
• I have not set up my DUO account
• I am a vendor without a University issued NetID
• I am an admitted student
• I am a newly hired employee or adjunct
• My FDU account is locked
• I need my Net ID password reset and have already attempted to do that through identity.fdu.edu

SAMI Support Public Request

Fairleigh Dickinson University offers a variety of technological resources and services for students. This guide will help students navigate the different tools to access and manage their accounts or information.

ID and Email

• Your FDU NetID

  Your FDU NetID verifies who you are and ensures the privacy of your personal information. Your FDU NetID and your NetID password will provide access to a variety of IT resources including your Self-Service, WebCampus, Office365, and Email. To get your NetID, review the guide on how to Claim or Create an FDU NetID Account.

• Changing your FDU NetID Password

  To protect the University and our students from cyber attacks and other malicious activity, we require that everyone in our community to periodically change their password. To change your password, review the guide on How To Change Your FDU NetID Password.

• Cisco DUO Multifactor Authentication

  To successfully use your NetID to access your accounts, you will need Two-Factor Authentication with Cisco DUO MFA

  Two-factor authentication adds a second layer of security to your FDU NetID. It requires two factors to verify identity. These factors include something you know – your FDU NetID and password, and something you have – a phone or passcode, to authenticate and gain access to your account on FDU services. Passwords alone no longer provide adequate protection against cyber hacking. DUO is required for all current FDU students.

  Review the Duo – Student Quick Start Guide to set up your mobile device with Cisco DUO MFA, and look at the Cisco Duo FAQ’s to get more information about Cisco DUO MFA.

• Email and Office 365

  Students can access their emails through any Web browser using their NetID and password to log in. To access our email, visit the Office Portal Login.

  Students can also access their FDU Email accounts on their mobile devices by installing the Outlook app. Read the guide below:

  • Accessing an FDU Email Account on a Mobile Device Using the Outlook App

  Current students who are registered for classes for the current term, or a future term have access to Microsoft Office 365 Suite applications. For more information, click on the links below:

  • Microsoft Office 365 Suite for Students
  • Microsoft Office 365 Apps

Academic Systems

• Webcampus

  Webcampus is a course content management system. FDU’s Webcampus is also known as the Blackboard System. On-line courses are taught through this system which also allows for interaction between the student and faculty member as well as on-line class discussions.

  To learn more about how to access Webcampus, read the guide on How to log in to Webcampus.

   

• Self-Service

  Self-Service is an interactive web application that enables students to view their individual information contained in FDU’s Student Information System. Students can use Self-Service to do things like view their financial aid, pay their bills, and register for classes.

  To learn more about how to use Self-Service, review the Self-Service Tutorial.

Network

• Connect to the FDU Network

  With your FDU NetID, you can connect to the FDU Network. For detailed instructions view the links below:

  • Connecting a mobile device to the “FDU-Secure” Wireless Network
  • FDU-Secure Wi-Fi Connection for Non FDU Owned Equipment
  • Setting up and Accessing the FDU VPN Client

Security

• Information Technology Security Awareness Resources
  • Safeguards Against Cybercrime
  • How can I spot a Phishing Scam?
  • Reporting Phishing or Junk Emails

Software

• Available Software for FDU Students

  Fairleigh Dickinson University has both licensed and open-source software, that is offered for academic and/or personal use for students. The links below point out to commonly used software, both licensed and open source, that are offered for academic and/or personal use to all Fairleigh Dickinson University faculty, staff and students.

  • Software Catalog
  • Microsoft Teams Tutorial
  • How to Successfully Attend Class via Zoom
  • How to Access OneDrive

   

Printing and Labs

• Computer Labs and Printing

  Computing Services has multiple computer labs available on both New Jersey Campuses for classroom instruction and student use. Visit the links below for more information.

  • Computing Services Computer Labs
  • How to Reserve a Computer Lab
  • Printing in The Computer Labs
• Virtual Labs

  FDU also provides remote access to many of the software applications typically found in university computer labs through our platform FDU Anywhere. You can access it using your FDU NetID credentials through this link FDU Anywhere. You can also review the FDU Anywhere Tutorial for more information on how to use our virtual labs.

   

Frequent Asked Questions

• Fairleigh Dickinson University Technical Assistance Center (UTAC)

  For any IT related questions and support, contact our Fairleigh Dickinson University Technical Assistance Center (UTAC) through the Fairleigh Dickinson Technical Assistance Center (UTAC) or the support page.

  • Fairleigh Dickinson Technical Assistance Center (UTAC)
  • Support Page